@technomoron/agent-run 0.99.41 → 0.99.42

package/CHANGES

@@ -1,6 +1,14 @@
 CHANGES
 =======
 
+Version 0.99.42 (2026-09-25)
+----------------------------
+* Apply repository AI-file checks only to project scopes and actual repositories.
+  Default-scope launches from a home directory no longer scan protected Windows
+  folders or treat personal Codex and Claude settings as repository files.
+* Skip the startup scan when the repository AI-file guard is disabled, and
+  preserve personal Claude settings during default-scope postflight checks.
+
 Version 0.99.41 (2026-09-25)
 ----------------------------
 * Use a shared Codex home with native named profiles, keeping project

package/dist/checks.js

@@ -25,7 +25,7 @@ function checkProject(projectRoot) {
         return findings;
     }
     const agentDir = (0, project_1.resolveAgentDir)(projectRoot);
-    if (profileForbidsLocalAiFiles(projectRoot, agentDir, profileResult.profile)) {
+    if ((0, project_1.hasProjectFileScope)(projectRoot, profileResult.profile) && profileForbidsLocalAiFiles(projectRoot, agentDir, profileResult.profile)) {
         for (const file of (0, project_1.findLocalAiFiles)(projectRoot, agentDir)) {
             findings.push({ message: `local AI file in project: ${file}`, severity: 'ERROR' });
         }

package/dist/commands.js

@@ -187,8 +187,10 @@ function requireProfile(tool, agentDir) {
     process.exit(1);
 }
 function checkLocalAiFiles(command, projectRoot, agentDir, context, allowLocal) {
+    if (!context.guardrails.forbidRepoAiFiles || !(0, project_1.hasProjectFileScope)(projectRoot, context.profile))
+        return;
     const files = (0, project_1.findLocalAiFiles)(projectRoot, agentDir);
-    if (!context.guardrails.forbidRepoAiFiles || files.length === 0) {
+    if (files.length === 0) {
         return;
     }
     if (!allowLocal) {

package/dist/project.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.resolveAgentDir = resolveAgentDir;
 exports.findLocalAiFiles = findLocalAiFiles;
 exports.findSourceRepos = findSourceRepos;
+exports.hasProjectFileScope = hasProjectFileScope;
 exports.isIgnoredDir = isIgnoredDir;
 exports.warnForLocalAiFiles = warnForLocalAiFiles;
 exports.failForLocalAiFiles = failForLocalAiFiles;
@@ -74,6 +75,11 @@ function findSourceRepos(rootPath) {
 function looksLikeRepoRoot(dir) {
     return fs.existsSync(path.join(dir, '.git')) || fs.existsSync(path.join(dir, 'package.json'));
 }
+function hasProjectFileScope(projectRoot, profile) {
+    // The default brain scope also serves home directories and other non-project
+    // folders. Personal tool configuration there is not repository-local state.
+    return profile !== 'default' || looksLikeRepoRoot(projectRoot);
+}
 function isIgnoredDir(dir) {
     if (fs.existsSync(path.join(dir, constants_1.IGNORE_FILE_NAME))) {
         return true;

package/dist/runtime/postflight.js

@@ -5,7 +5,7 @@ const fs = require("fs");
 const path = require("path");
 const project_1 = require("../project");
 function postflightProjectCheck(context, allowLocal, code) {
-    if (!context.guardrails.forbidRepoAiFiles) {
+    if (!context.guardrails.forbidRepoAiFiles || !(0, project_1.hasProjectFileScope)(context.projectRoot, context.profile)) {
         return code;
     }
     if (!allowLocal) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@technomoron/agent-run",
-  "version": "0.99.41",
+  "version": "0.99.42",
   "packageManager": "pnpm@10.34.5",
   "bin": {
     "agent-run": "dist/agent-run.js",